Files
Files It copies itself to the following location:• %WINDIR%\nvsvc32.exe

The following file is created:
– Non malicious file:• %WINDIR%\ntdll.dl

It tries to download a file:
– The location is the following:• http://rapidshare.com/files/4465174**********
It is saved on the local hard drive under: %drive%\tcc.exe Further investigation pointed out that this file is malware, too.

It tries to execute the following files:
– Filename:• %SYSDIR%\net.exe